First of all, my
company makes satellite radios, and I implemented SNMP support
(v1, v2) for our radios and switches, which use an SoC based on
ARM9 processor. I did this by using net-snmp utilities to talk
to snmpd, capturing packets in WireShark, and
reverse-engineering the various Get/GetNext/Set/GetBulk/Trap
requests and responses. This is working well, and I can
communicate successfully with our devices, using net-snmp
utilities and a Visual Studio application. Now we want to add v3 support... I've captured v3 comm sequences for authNoPriv and authPriv communications, but beyond that I'm in unknown territory... As a starter, I thought I'd just look at the authentication messages, and leave encryption for later, but I can't even figure out how to match the MD5 messages that I see in the packets; for one thing, all the MD5 utilities that I've seen, generate 16-byte messages, while the MD5 data (msgAuthParams) in these messages is only 12 bytes. Beyond that, I don't know what portion of the messages the digest is generated over. ITM, I tried looking at snmpget, and the functions in snmplib that this calls, but I got as far as generate_Ku() and am completely lost!! Are there tutorials somewhere, that will discuss at a higher level, how to handle the message generation for auth and encryption for snmpv3, preferably with respect to the openssl modules ?? And will I actually need detailed understanding of how encryption works before I can implement these functions?
|
------------------------------------------------------------------------------ Find and fix application performance issues faster with Applications Manager Applications Manager provides deep performance insights into multiple tiers of your business applications. It resolves application problems quickly and reduces your MTTR. Get your free trial! https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________ Net-snmp-users mailing list Net-snmp-users@lists.sourceforge.net Please see the following page to unsubscribe or change other options: https://lists.sourceforge.net/lists/listinfo/net-snmp-users